This release includes 1 security fix for security teams reviewing exposed deployments.
Published 1mo
Developer Productivity
✓ No known CVEs patched
This release patches 1 known CVE
Topics
form
form-builder
laravel
marketing-tools
nuxt
saas
Affected surfaces
auth
Summary
AI summaryHardened editable submission links by moving legacy submissions to UUID IDs and rejecting old predictable identifiers.
Full changelog
Small update with PDF template improvements, self-hosted licensing fixes, and submission handling polish.
What's changed
- Create PDF templates from scratch with form fields rendered into a ready-to-edit layout. The PDF editor also opens with a better fit-to-width zoom, snap guides for alignment, clearer static text previews, and a more compact zone list.
- Added a public self-hosted Enterprise license checkout and improved AppSumo lifetime workspace entitlement handling, including a dry-run backfill command for affected workspaces.
- Hardened editable submission links by moving legacy submissions to UUID public IDs and rejecting old predictable identifiers.
- Improved embedded form SDK messaging and iframe bridge reliability.
- Fixed partial submission validation, summary date/rating calculations, stale matrix rows, long form title truncation, and comparison/pricing page polish.
Upgrade notes
- This release includes new database migrations. Run the normal migration flow before using the new build.
- If you are affected by the AppSumo workspace entitlement issue, run the new backfill command after deploy.
- Old Hashid-based edit links for legacy submissions are intentionally invalidated; UUID-based links remain valid.
Full diff: https://github.com/OpnForm/OpnForm/compare/v2.0.1...b8f27f58a5893ff4eee3c4c2a24f0af77da0159f
Breaking Changes
- Old Hashid-based edit links for legacy submissions are intentionally invalidated.
Security Fixes
- Editable submission links hardened by moving legacy submissions to UUID public IDs and rejecting old predictable identifiers (prevents enumeration/abuse).
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- v2.0.0 Requires running new database migrations before using V2 features.
Beta — feedback welcome: [email protected]